CVE-2005-3074

EPSS 0.43%
Veröffentlicht 27.09.2005 19:03:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

SQL injection vulnerability in rsyslogd in RSyslog before 1.0.1 and before 1.10.1 allows remote attackers to execute arbitrary SQL commands via crafted syslog messages.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Rsyslog ≫ Rsyslogd Version <= 1.0.1_stable

Rsyslog ≫ Rsyslogd Version <= 1.10.1_development

Rsyslog ≫ Rsyslogd Version0.8.0_stable

Rsyslog ≫ Rsyslogd Version0.8.1_stable

Rsyslog ≫ Rsyslogd Version0.8.2_stable

Rsyslog ≫ Rsyslogd Version0.8.3_stable

Rsyslog ≫ Rsyslogd Version0.8.4_stable

Rsyslog ≫ Rsyslogd Version0.9.0_stable

Rsyslog ≫ Rsyslogd Version0.9.1_stable

Rsyslog ≫ Rsyslogd Version0.9.2_stable

Rsyslog ≫ Rsyslogd Version0.9.3_stable

Rsyslog ≫ Rsyslogd Version0.9.4_stable

Rsyslog ≫ Rsyslogd Version0.9.5_stable

Rsyslog ≫ Rsyslogd Version0.9.6_stable

Rsyslog ≫ Rsyslogd Version0.9.7_stable

Rsyslog ≫ Rsyslogd Version0.9.8_stable

Rsyslog ≫ Rsyslogd Version1.0.0_stable

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.597

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/16947

Patch

http://www.rsyslog.com/Article35.phtml

https://nvd.nist.gov/vuln/detail/CVE-2005-3074

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3074

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3074

EUVD